Rotating Secrets

What You Will Learn

• How to rotate secrets safely
• Both Vault and SOPS workflows

This page is a placeholder. Full content will be written after tone/depth review of priority chapters.

Planned Content

• When to rotate: scheduled, after a breach, employee departure
• Vault rotation: update secret, trigger ExternalSecret sync
• SOPS rotation: decrypt, update, re-encrypt
• Verifying the rotation worked
• Communicating with affected clients

Key Takeaways

• Secret rotation is a regular maintenance task
• Always verify apps still work after rotation

What Is Next

Next up: kubectl Cheat Sheet (Chapter 12) where you will find your quick reference guide.